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DETAILED ACTION 

1. Claims 1-20 are presented for examination. 

2. Applicants arguments with respect to claims 1-20 have been considered but are moot in 
view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 102 

3. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public use or on 
sale in this country, more than one year prior to the date of application for patent in the United States. 

4. Claims 1, 5, 1 1, and 15 are rejected under 35 U.S.C. 102(b) as being anticipated by 
Ganesan (U.S. Patent Number: 5.557.678). 

As per claim 1, Ganesan teaches method for enabling encryption and decryption of an initial 
version of a software product comprising the steps of: 

generating a first encryption key (Ganesan Fig. 2 No. 202); 

encrypting the initial version of the software product with said first encryption key to 
generate an encrypted initial software product (Ganesan Fig. 2 No. 220; encrypting the message 
(software product) with the first key); 
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generating a first key portion of said first encryption key (Ganesan Fig. 2 No. 202, and 
col. 2 lines 52-58; d.sub.i); 

calculating a second key portion by utilizing said first key portion and said first 
encryption key to generate a said second key portion such that the combination of said first key 
portion and second key portion form said first encryption key (Ganesan Fig. 2 No. 202, and col. 
2 lines 52-58; d=di*dj); 

providing said first key portion and said second key portion and said encrypted initial 
software product for use in a hardware product (Ganesan Col. 2 lines 56-59, and col. 4 lines 47- 
49; message (software product) is encrypted (message encrypted using authority key that is 
portions of the key) and provided to the user); 

combining said first key portion and said second key portion to provide said first 
encryption key in said hardware product (Ganesan Col. 2 lines 56-69; d=di*dj); and 

utilizing said first encryption key to decrypt said encrypted initial software product in 
said hardware product (Ganesan Col. 2 lines 56-69, col. 6 lines 1-19, and Fig. 2 No. 222; 
decrypting the message (software product) using the key (the first and the second portion of the 
key is the first encryption key)). 

As per claim 1 1 a method for providing for the security of encryption keys for encryption and 
decryption of an initial version of a software product provided by a provider to a user of a 
hardware product, said method comprising: 

providing a first encryption key (Ganesan Fig. 2 No. 202); 
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encrypting the initial version of the software product with said first encryption key to 
generate an encrypted initial software product (Ganesan Fig. 2 No. 222); 

providing a first key portion (Ganesan Fig. 2 No. 202, and col. 2 lines 52-58; d.sub.i); 

utilizing said first key portion and said first encryption key to calculate a second key 
portion such that the combination of said first and second key portions form said first encryption 
key (Ganesan Col. 2 lines 56-59, and col. 4 lines 47-49; message (software product) is encrypted 
(message encrypted using authority key that is portions of the key) and provided to the user); 

storing said first key portion in storage means external to the hardware (Ganesan Col. 5 
lines 29-34, and Col. 6 lines 21-31 ; storing the portions of the key on the device (hardware), and 
portions of the key can be stored separately); 

storing said second key portion separately from said first key portion in a tamper proof 
memory means in the hardware product (Ganesan Col. 5 lines 29-34; storing the portion of the 
key in a secure area); 

storing said encrypted software product in a further memory means in the hardware 
product (Ganesan Fig. 5 No. 504, and col. 10 lines 49-50; storing the encrypted data on the 
device (hardware)); 

combining said first key portion and said second key portion in the hardware product to 
provide said first encryption key (Ganesan Col. 2 lines 56-69; d=di*dj); and 

decrypting said encrypted initial software product with said first encryption key (Ganesan 
Col. 2 lines 56-69, col. 6 lines 1-19, and Fig. 2 No. 222; decrypting the message (software 
product) using the key (the first and the second portion of the key is the first encryption key)). 
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As per claim 5, Ganesan teaches the method further enabling an update of said first encryption 
key to provide a second encryption key to secure a different version of the initial software 
product, further comprising the steps of: 

generating the second encryption key (Ganesan Fig. 2 No. 202; encryption key is 
generated it is obvious to generate the second encryption key because it would be different from 
the first encryption key and enhance security); 

encrypting the different version of the initial software product with the second encryption 
key to provide an encrypted different version of the software product (Ganesan Fig. 2 No. 220; 
the message is encrypted using the encryption key it would be obvious to one ordinary skill in 
the art at the time of the invention was made to provide an encrypted different version of the 
software product with the second encryption key because it would be different from the first 
encryption key and enhance security); 

combining the first encryption key and the second encryption key to provide a third key 
portion (col. 2 lines 57-59); 

installing said third key portion and the encrypted different version of the software 
product in said hardware product (Ganesan Col. 5 lines 29-34, and Col. 6 lines 21-31); 

combining said third key portion and said second key portion to generate a fourth key 
portion in said hardware product (Ganesan Col. 2 lines 56-69; d~di*dj); 

combining the first key portion and the fourth key portion to provide said second 
encryption key in said hardware product (Ganesan Col. 2 lines 56-69; d=di*dj); and 
using the second encryption key to decrypt the encrypted different version of the software 
product (Ganesan Col. 2 lines 56-69, col. 6 lines 1-19, and Fig. 2 No. 222). 
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As per claim 15, Ganesan teaches the method further enabling security of an update of said first 
encryption key and providing a second encryption key for encrypting a different version of the 
initial software product, further comprising: 

generating the second encryption key (Ganesan Fig. 2 No. 202; encryption key is 
generated it is obvious to generate the second encryption key because it would be different from 
the first encryption key and enhance security); 

encrypting the different version of the initial software product with said second 
encryption key to provide an encrypted different version of the initial software product (Ganesan 
Fig. 2 No. 220; the message is encrypted using the encryption key it would be obvious to one 
ordinary skill in the art at the time of the invention was made to provide an encrypted different 
version of the software product with the second encryption key because it would be different 
from the first encryption key and enhance security); 

combining said first encryption key and said second encryption key to provide a third key 
portion (col. 2 lines 57-59); 

installing said third key portion in said tamper proof memory means (Ganesan Col. 5 
lines 29-34; storing the portion of the key in a secure area); 

installing said encrypted different version of the initial software product in said further 
memory means in the hardware product (Ganesan Col. 5 lines 29-34, and Col. 6 lines 21-31); 

combining said third key portion and said second key portion to generate a fourth key 
portion in the hardware product (Ganesan Col. 2 lines 56-69; d=di*dj); 
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combining said first key portion and said fourth key portion to provide said second 
encryption key in the hardware product (Ganesan Col. 2 lines 56-69; d=di*dj); and 

using said second encryption key in the hardware product to decrypt the encrypted 
different version of the initial software product (Ganesan Col. 2 lines 56-69, col. 6 lines 1-19, 
and Fig. 2 No. 222; decrypting the message (software product) using the key (the first and the 
second portion of the key is the first encryption key)). 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

6. Claims 2-4, 6-8, 12-14, and 16-18 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Ganesan (U.S. Patent Number: 5.557.678) in view of Patel (U.S Pub. No. 
2002/0071558 Al). 

As per claims 2, 6, 12, and 16, Ganesan teaches all the subject matter as described above. 

Ganesan does not explicitly teach random number generator. 

However Patel discloses the method wherein said step of generating a first (second) 
encryption key utilizes a random number generator to generate said first encryption key (Patel 
page 5 par. 0050). 
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Therefore it would have been obvious to one having ordinary skill in the art at the time 
the invention was made to employ the teachings of Patel within the system of Ganesan because it 
would produce portions of the key in using exclusive-or. 

As per claim 3, Ganesan and Patel teach all the subject matter as described above. In addition 
Patel teaches the method wherein said step of calculating a second key portion utilizes an 
"exclusive or" logic operation to combine said first key portion and said first encryption key to 
calculate said second key portion (Patel page 3 par. 0022). The rational for combining are the 
same as claim 2 above. 

As per claim 7, Ganesan and Patel teach all the subject matter as described above. In addition 
Patel teaches wherein said step of combining the first encryption key and the second encryption 
key utilizes an "exclusive or" logic operation to combine said first encryption key and said 
second encryption key to generate said third key portion (Patel page 3 par. 0022). The rational 
for combining are the same as claim 2 above. 

As per claim 13, Ganesan and Patel teach all the subject matter as described above. In addition 
Patel teaches wherein said step of utilizing said first key portion and said first encryption key to 
calculate said second key portion utilizes an "exclusive or" logic operation (Patel page 3 par. 
0022). The rational for combining are the same as claim 2 above. 
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As per claim 17, Ganesan and Patel teach all the subject matter as described above. In addition 
Patel teaches wherein said step of combining said first encryption key and said second 
encryption key to generate a third key portion utilizes an "exclusive or" logic operation (Patel 
page 3 par. 0022). The rational for combining are the same as claim 2 above. 

As per claim 4, Ganesan and Patel teach all the subject matter as described above. In addition 
Patel teaches Ganesan teaches the method wherein said step of combining said first key portion 
and said second key portion utilizes an "exclusive or" logic operation to combine said first key 
portion and said second key portion to provide said first encryption key (Patel page 3 par. 0022). 
The rational for combining are the same as claim 2 above. 

As per claim 8, Ganesan and Patel teach all the subject matter as described above. In addition 
Patel teaches wherein said step of providing said second encryption key utilizes an "exclusive or" 
logic operation to combine said first key portion and said fourth key portion to provide said 
second encryption key (Patel page 3 par. 0022). The rational for combining are the same as claim 
2 above. 

As per claim 14, Ganesan and Patel teach all the subject matter as described above. In addition 
Patel teaches wherein said step of combining said first key portion and said second key portion 
utilizes an "exclusive or" logic operation performed by said hardware product (Patel page 3 par. 
0022). The rational for combining are the same as claim 2 above. 
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As per claim 18, Ganesan and Patel teach all the subject matter as described above. In addition 
Patel teaches wherein said step of combining said first key portion and the fourth key portion to 
provide said second encryption key utilizes an "exclusive or" logic operation (Patel page 3 par. 
0022). The rational for combining are the same as claim 2 above. 

Claims 9-10 and 19-20 are rejected under 35 U.S.C. 103(a) as being unpatentable over Ganesan 
(U.S. Patent Number: 5.557.678) in view of Ganesan (Ganesan '276, Patent No. 5,535,276). 

As per claims 10 and 20, Ganesan teach all the subject matter as described above. 
Ganesan does not explicitly teach non-sequential encryption key. 

Ganesan '276 discloses non-sequential encryption key to plurality of users (col. 8 lines 9- 
19) in using split key (d=di*dj) (col. 2 lines 59-62) that reads on the method wherein said second 
encryption key is non-sequential with said first encryption key. 

Therefore it would have been obvious to one having ordinary skill in the art at the time of 
the invention was made to employ the teachings of Ganesan '276 within the system of Ganesan 
because it would generate different encryption keys that are non sequenced. Therefore it would 
be obvious to one havening ordinary skill in the art at the time of the invention was made to 
employ the teachings Ganesan '276 within the system of Ganesan because it would generate 
different encryption keys that are non sequential for different versions of software to enhance 
security. 
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7. 



Any inquiry concerning this communication or earlier communications from the 



examiner should be directed to Eleni A Shiferaw whose telephone number is 571-272-3867. The 
examiner can normally be reached on Mon-Fri 8:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz R Sheikh can be reached on 571-272-3795. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Eleni Shiferaw 
Art Unit 2136 
January 6, 2005 




